KubeCon + CloudNativeCon Japan 2025: Full Schedule

16-17 June
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Japan 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Japan Standard Time (UTC+9:00). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

arrow_back View All Dates

11:30 JST

Should Our Project Join the CNCF? - Lenka Bočincová, Red Hat

Tuesday June 17, 2025 11:30 - 12:00 JST

Level 1 | Pegasus B2-C

Got an open source project? Considering submitting it to the CNCF (or another foundation)? Whether and when to do this is one of the biggest decisions you'll make in the life of your project. Joining a foundation changes things fundamentally, and whether or not this is a good decision is going to depend on where you are in your project's development and what your goals for the project currently are.

As a community architect in the Red Hat Open Source Program Office, I help projects with this decision. During this talk, I will share common things that projects need to consider before they make this important decision. I will also talk about common benefits and challenges that projects usually experience. After this talk you should have a better understanding of whether you should contribute the project to CNCF or not.

Speakers

Lenka Bocincova

Community architect, OSPO, Red Hat

I am a community architect at Red Hat, Open Source Program Office, where I work with open source projects related to Red Hat cloud native technologies and help them grow their communities. I enjoy a good cup of coffee and exploring cities on a bicycle :)

Tuesday June 17, 2025 11:30 - 12:00 JST
Level 1 | Pegasus B2-C

Cloud Native Experience

Content Experience Level Beginner
Presentation Language English

12:10 JST

Bridging Cultures: Kubernetes Upstream Training and Japan's Open Source Journey - Shu Muto & Ziyi Xie, NEC Solution Innovators, Ltd.; Masahiro Kitamura, LY Corporation; Junya Okabe, University of Tsukuba; Masaki Kimura, Hitachi

Tuesday June 17, 2025 12:10 - 12:40 JST

Level 1 | Pegasus B2-C

This panel, featuring instructors from Kubernetes Upstream Training Japan, explores how this initiative has accelerated open-source involvement across the country since 2019. Our panelists will share personal stories, highlighting how the training lowers barriers, boosts motivation, and drives long-term community engagement. We’ll examine the current status of Japanese contributions to Kubernetes, discuss lessons learned from past participants, and propose strategies to strengthen future growth. Attendees can expect a candid conversation about nurturing collaboration, overcoming cultural and linguistic challenges, and fostering a thriving ecosystem. Whether you’re an aspiring contributor or a seasoned leader, join us to gain practical insights into cross-cultural community-building and discover the next chapter for cloud-native innovation in Japan.

Speakers

Masaki Kimura

Engineer, Hitachi, Ltd.

Masaki Kimura is an OSS developer at Hitachi, Ltd. He has been working for improving Kubernetes. He is one of the main contributors to make raw block volume feature and CSI feature GA and CrossNamespaceVolumeDataSource feature alpha. He is an author of KEP-2839.

Masahiro Kitamura

SRE, LY Corporation

Site Reliability Engineer at LY Corporation. Initiated and leading the Japanese localization team.

Shu Muto

Open Source Strategy Professional, NEC Solution Innovators, Ltd.

Shu Muto is a maintainer for the Kubernetes Dashboard since Autumn 2019 and a chair for SIG UI. Previously, he contributed to the OpenStack Dashboard and its plugins as a core developer from 2015. Shu also develops WebRTC applications. He organizes Kubernetes Upstream Training Japan... Read More →

Ziyi Xie

Software Engineer, NEC Solution Innovators, Ltd.

Xie Ziyi is an active contributor in the Kubernetes community, currently focusing on documentation and storage. She also serves as an instructor for new contributors at Kubernetes Upstream Training events in Japan. She has spoken at the Kubernetes Contributor Summit and KubeDay J... Read More →

Junya Okabe

Student, University of Tsukuba

Junya is passionate about cloud native technologies, especially Kubernetes, and is a professional in this field. He leads the localization of Kubernetes and CNCF documentation as a localization approver in SIG-Docs and a reviewer for several projects. Additionally, he is an active... Read More →

Tuesday June 17, 2025 12:10 - 12:40 JST
Level 1 | Pegasus B2-C

Cloud Native Experience

Content Experience Level Any
Presentation Language English

14:10 JST

Full Lifecycle API Management in Kubernetes With Envoy and WebAssembly - Brandon Kang, Akamai Technologies & Mostafa Radwan, Datadog

Tuesday June 17, 2025 14:10 - 14:40 JST

Level 1 | Pegasus B2-C

As cloud-native applications accelerate in complexity, managing APIs end to end is a top priority. This session introduces a next-generation, Kubernetes-native approach using Envoy Proxy and WebAssembly (Wasm) for dynamic, high-performance traffic control.

We’ll show how Wasm powers real-time policy enforcement, AI-assisted traffic analysis, and advanced rate limiting—without rebuilding Envoy. Attendees will learn how to implement Zero Trust principles, secure multi-tenant API gateways, and deliver external routes with minimal overhead.

Observability enhancements using eBPF and OpenTelemetry will demonstrate how to align trace data with runtime metrics for deeper insights. Finally, we’ll discuss developer onboarding, version governance, and lifecycle management to ensure long-term API success.

A live demo will illustrate ephemeral testing environments, rapid iteration, and how to achieve a future-proof, high-throughput API management layer in Kubernetes.

Speakers

Mostafa Radwan

Senior Solutions Engineer, Datadog

Mostafa is a technologist and consultant specializing in cloud native computing. He started his career as a software engineer before getting into the trenches of application and production support. He enjoys helping enterprise companies successfully adopt DevOps and cloud-native technologies... Read More →

Brandon Kang

Principal Technical Solutions Architect, Akamai Technologies

Brandon Kang is a Principal Technical Solutions Architect at Akamai Technologies, specializing in cloud-native projects across Asia as a compute specialist.Before joining Akamai, he served as a Lead Software Engineer at Samsung, a Senior Program Manager at Microsoft, and a Service... Read More →

Tuesday June 17, 2025 14:10 - 14:40 JST
Level 1 | Pegasus B2-C

Application Development

Content Experience Level Beginner
Presentation Language English

14:50 JST

Mastering Authorization: Integrating Authentication and Authorization Data in Cloud Native Apps - Yoshiyuki Tabata, Hitachi, Ltd.

Tuesday June 17, 2025 14:50 - 15:20 JST

Level 1 | Pegasus B2-C

Authorization is one of the most important considerations for cloud-native applications, as highlighted by the OWASP Top 10. For a long time, there was no clear standard, making authorization a significant challenge for many implementers. The OpenID Foundation AuthZEN WG is now working on standards, focusing on interfaces between PEP (Policy Enforcement Point) and PDP (Policy Decision Point), which provides some hope.
However, managing authorization data remains challenging. Since this data is closely related to authentication data, architects often struggle with how the OP (OpenID Provider) and PDP should manage and integrate it. There are multiple methods, and the best approach varies by use case.
In this session, Yoshiyuki Tabata will explain various methods for managing and integrating authentication and authorization data. He will also describe implementation using Keycloak for OP and Topaz for PDP, providing valuable insights into effective data management.

Speakers

Yoshiyuki Tabata

Senior OSS Consultant, Hitachi

He's a Senior OSS Consultant at Hitachi, Ltd. As an expert in IAM and APIs, he has provided numerous consultations over the past decade, including designing API and Authn/Authz platforms. He has actively contributed to CNCF TAG Security and has added significant functionalities to... Read More →

Tuesday June 17, 2025 14:50 - 15:20 JST
Level 1 | Pegasus B2-C

Security

Content Experience Level Intermediate
Presentation Language English

15:50 JST

Practical Cloud Native Compliance Automation With OSCAL Compass - Chris Butler, Red Hat & Takumi Yanagawa, IBM Research

Tuesday June 17, 2025 15:50 - 16:20 JST

Level 1 | Pegasus B2-C

Cloud presents many advantages to users in terms of flexibility, scalability and innovation. Unfortunately compliance has become more complex as standards and regulations are used by end consumers as a proxy for security of underlying platforms whose operations are opaque. Consequently platform providers have ever increasing compliance obligations.

Compliance-as-code encompasses many activities such as automation of system configuration and general DevSecOps approaches. One perpetual challenge is how to provide machine readable workflows which span from standard to audit to allow automation in a way that scales.

OSCAL-Compass, a CNCF sandbox project, provides tooling to manage both the compliance artefacts as code and link those artefacts to executable policies. This talk will provide practical introduction to using OSCAL compass to document and enforce compliance controls using two of its tools: Compliance Trestle and C2P (compliance2policy) in the context of Kubernetes clusters.

Speakers

Takumi Yanagawa

Advisory Software Developer, IBM Research

Takumi is an advisory software developer working in IBM Research - Tokyo on AI for Code and Security. He has a strong background in DevOps engineer and AI Governance product development using cloud-native technologies. With several years of experience, he has worked on building and... Read More →

Chris Butler

Senior Principal Chief Architect, Red Hat

Dr. Chris Butler is a Chief Architect in the APAC Field CTO Office at Red Hat. Chris’ focus is working with regulated clients who are building infrastructure, application and AI platforms. Chris facilitates co-innovation engagements with our clients and partners with our product... Read More →

Tuesday June 17, 2025 15:50 - 16:20 JST
Level 1 | Pegasus B2-C

Security

Content Experience Level Intermediate
Presentation Language English

16:30 JST

Your SBOM Is Lying To You – Let’s Make It Honest - Justin Cappos & Yuchen Zhang, New York University

Tuesday June 17, 2025 16:30 - 17:00 JST

Level 1 | Pegasus B2-C

SBOMs (Software Bills of Material) are essential for improving visibility and security in the software supply chain. As open-source code drives modern development, organizations face growing security risks due to limited transparency in software dependencies. Attacks like SolarWinds (2020) and Kaseya (2021) highlight the urgent need for stronger software supply chain security.
However, SBOMs are often inaccurate. This talk explores why these inaccuracies occur, how attackers exploit them, and how to address these issues. A key challenge is dependency management file analysis (e.g., cargo.toml for Rust), which struggles to track components effectively.
Enter SBOMit, an OpenSSF sandbox project leveraging in-toto attestations to create cryptographically verifiable SBOMs. By capturing supply chain steps as they occur, SBOMit enhances accuracy, mitigates tampering risks, and strengthens security. This talk examines SBOMit’s role in improving SBOM reliability across the CNCF ecosystem.

Speakers

Justin Cappos

Professor, New York University

I am a professor at NYU who has been working on software supply chain security for more than 20 years. I am a maintainer / creator of the TUF, Uptane, and in-toto projects, which are all under the LF.

Yuchen Zhang

Postdoctoral Associate, New York University

Yuchen is currently a postdoctoral researcher with the Secure Systems Laboratory (SSL) at the Tandon School of Engineering, New York University. He obtained his Ph.D. from the Department of Computer Science at Stevens Institute of Technology. Prior to Stevens, he completed his undergraduate... Read More →

Tuesday June 17, 2025 16:30 - 17:00 JST
Level 1 | Pegasus B2-C

Security

Content Experience Level Any
Presentation Language English